Fortinet FortiNAC-F Open Redirect Vulnerability

A vulnerability allowing URL redirection to untrusted sites (open redirect) has been identified in Fortinet FortiNAC-F versions 7.6.0 through 7.6.5, as well as all versions of FortiNAC-F 7.4 and 7.2. This vulnerability may enable a remote privileged attacker with system administrator rights to redirect users to arbitrary websites by using a specially crafted CSV file.

Impact

Exploitation of this vulnerability could lead to unauthorized redirection of users to malicious websites, potentially causing phishing or other types of attacks.

Remediation

Users of Fortinet FortiNAC-F 7.6 should upgrade to version 7.6.6 or above. Those on FortiNAC-F 7.4 or 7.2 should migrate to a fixed release.